Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
File: s2DwCXvkgcIbsdUchdRPZXQViqk.mft (raw, json)
Hash identifier: aTMGdWXFFNEL7WZLnfgwHUmKxrHCTlBs4knoZJIcB/g=
Subject key identifier: 74:33:13:01:2C:6B:5B:3A:8C:BF:9D:A9:C9:08:61:8C:E2:60:BB:48
Authority key identifier: B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
Certificate issuer: /CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Certificate serial: 019E1D90EC1F3F80DD004E16F6415834838F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
Manifest number: 0978
Signing time: Tue 12 May 2026 19:01:37 +0000
Manifest this update: Tue 12 May 2026 19:01:37 +0000
Manifest next update: Wed 13 May 2026 19:01:37 +0000
Files and hashes: 1: BP8ohZBcj6NcqBRjGc25QgNrnnI.roa (hash: 395UmkLig0TCCb9njfR7+pVbNAtUDBDAYXAZ0wdHK9o=)
2: ew71Dr2hxhH6I9_RZhH0lsluIig.roa (hash: 0cm9urifI/2Uh0AOprLssITUSaMSxFAaeqTRzg9iNI0=)
3: jCJ22Fdf8SnbI8DcZqU35nF2Zew.roa (hash: JVckqbft6dBMO2AzO5LhlxSJUFnZrQ2XDuU3MVU82uA=)
4: s2DwCXvkgcIbsdUchdRPZXQViqk.crl (hash: SkJvo6hrrUC1k7SmS7jWEpjHF9cx4jpYimiq4DU8V08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:ec:1f:3f:80:dd:00:4e:16:f6:41:58:34:83:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Validity
Not Before: May 12 19:01:37 2026 GMT
Not After : May 13 19:01:37 2026 GMT
Subject: CN=743313012c6b5b3a8cbf9da9c908618ce260bb48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b7:10:76:f8:9f:56:c0:eb:dc:34:19:63:e9:
41:36:60:92:f5:89:a3:1f:5b:1e:01:99:8d:64:54:
b7:1c:c4:7b:37:57:25:13:6b:d2:41:03:57:2c:d5:
19:90:39:e9:f2:af:ea:55:74:fc:6a:3f:29:0c:ac:
ff:d4:98:2c:a5:24:31:3e:7c:f1:bc:36:f2:17:31:
b8:83:80:ed:01:b1:72:eb:aa:4f:27:2e:6a:13:ae:
e7:f0:c0:7a:f9:1b:31:45:ef:27:9c:a5:cb:6c:cc:
71:61:64:ac:02:7d:56:fd:14:39:ea:6a:d5:c5:c1:
32:44:e5:2b:88:cc:9d:24:d7:e6:53:d9:24:38:0a:
8a:4d:3a:a1:98:ca:66:dc:9e:c5:59:df:bb:13:c9:
ac:f2:b4:c2:9b:ff:c7:99:22:62:32:1e:77:d6:98:
70:de:b1:0d:42:24:ae:89:42:3a:6d:f2:4c:90:74:
e2:75:e8:fc:29:bd:32:cb:a4:83:4e:cc:8a:fb:5c:
08:b3:86:83:8f:5f:11:b8:86:20:fe:e9:9f:f0:d6:
c3:56:dc:57:c2:ce:aa:dc:45:f6:9d:36:69:76:9a:
e7:2c:bd:9c:be:ca:9e:93:d7:48:06:62:77:a4:34:
f8:74:be:c3:e7:91:ac:16:49:b2:85:9f:a2:bf:0e:
64:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:33:13:01:2C:6B:5B:3A:8C:BF:9D:A9:C9:08:61:8C:E2:60:BB:48
X509v3 Authority Key Identifier:
keyid:B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:78:58:64:2d:4f:30:50:f9:35:5e:b0:bd:7a:6b:80:9f:5e:
9f:a8:ee:b0:69:e6:aa:cf:32:a1:51:4d:25:34:42:a8:67:6f:
a9:04:0f:e8:47:fb:96:ab:02:94:3c:41:21:8d:a8:88:b3:50:
80:9e:5e:20:61:b2:65:9e:99:0c:4f:10:cc:5b:92:3b:5a:8f:
d9:d4:65:9d:36:96:df:6e:53:31:cb:15:3b:52:15:af:b2:31:
ad:23:25:cd:fc:c9:57:e1:35:f2:28:45:ed:f0:92:63:37:fd:
3f:41:eb:1e:5d:10:9e:4b:0c:c5:10:e7:2c:e9:02:11:ec:92:
12:78:5d:69:54:c8:ea:0c:22:b6:aa:41:51:ce:13:39:b8:4f:
2d:54:20:bd:92:21:d6:65:4a:24:94:b6:73:a4:f4:45:62:8f:
1e:a7:06:e0:14:a6:63:c2:ed:d9:ed:37:7c:24:b2:6c:6b:b9:
fa:d6:84:20:39:05:c3:2b:a7:35:f9:ec:ad:a1:44:dc:e3:9f:
1b:61:84:48:32:45:82:9b:37:ff:19:b2:42:9a:04:c5:43:64:
1f:fb:06:0a:ab:30:4d:8f:09:31:f1:68:5b:7a:46:7d:c6:f2:
25:3a:ab:0f:14:28:95:64:c0:48:9b:ed:24:0f:17:61:4b:f3:
ee:e7:8c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:34:52 2026 by rpki-client